[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [xacml-dev] Conformance Tests for V1
Sorry, I'm sorry, I've misspelled some examples so I'm resending a correct version of them. Here's the corrected and more descriptive version of the Conformance Tests that I'm not able to pass. * IIIF005. Xpath compilation error. "//md:record[?]/..." I have an invalid token error, I think is the "?", this is probably related to the version of XPath supported by .Net. On the other hand, the Xpath version supported in XACML is 1.0 (as described in the XPathVersion element description) and quantifiers as predcates are not supported in Xpath 1.0, they were added in Xpath 2.0. Seems the conformance test is using an Xpath 2.0 feature. * IIIF007. Context node issue. The xpath is "./xacml-context/Resource" which seems the context node (./) is the Resource element. In the spec says the context node will be Request element. So the Condition for the only Rule in this Policy will not find any node since all the Xpaths will fail. What do you do to pass this test? * IIIA014. The result in the conformance test have 4 Obligations, and my implementation is returning 6. I'm passing all the other samples related to Obligations except this one. I{m not able to understand why I have to return 4 obligations in this test. Here's the execution steps: There are 3 policies within a policy set. Each policy have 4 Obligations, 2 on Deny and 2 on Permit. The PolicySet also have 4 Obligations 2 on Deny and 2 on Permit. Policy1 is NotApplicable which does not add any Obligation, Policy2 is Permit which adds 2 Obligations and Policy3 is Deny which adds 2 Obligations. Since the PolicySet is Deny it will add 2 Obligations which sums 6. The 6 Obligations that I'm returning are: policy2:obligation-1, policy2:obligation-2, policy3:obligation-3, policy3:obligation-4, policyset:obligation3 and policyset:obligation4. The ConfotmanceTest does not have the policy2:obligation-1 and policy2:obligation-2. Can you tell me if the execution steps are incorrect? * IIIG005/6. Never mind. I was checking the code to give you a better description and I found a bug in the implementation. :S Thank you in advance, Diego Gonzalez Lagash Systems SA -----Original Message----- From: diego gonzalez [mailto:diegog@lagash.com] Sent: Tuesday, October 19, 2004 5:43 PM To: xacml-dev@lists.oasis-open.org Subject: [xacml-dev] Conformance Tests for V1 Hi Implementors, XACML.NET is not acutally passing 5 of the ConformanceTests and I'l like to discuss with you about them. * IIIF005. Xpath compilation error. "//md:record[?]/..." I have an invalid token error, I think is the "?", this is probably related to the version of XPath supported by .Net. * IIIF007. Curent node issue, the xpath is "./xacml-context" which seems the current node (./) is the root, or DocumentElement in DOM terms. * IIIG005. The problem here is the Xpath is assuming the current node is some node in the document is the Resource element (local-name()='Resource'). And I'm not able to figure out what is the current node for all the XPath sentences execution. If I set the current node to the one this test is assuming, I'll be breaking other conformance tests. * IIIG006. Same curent node issue, the xpath is "./xacml-context" which seems the current node (./) is the root, or DocumentElement in DOM terms. If I make the current node to a specific node so the IIIF007 and IIIG006 tests works (current node is the DocumentElement) I'll make the IIIG005 fails and vice versa. What do you do with the current node issue? * IIIA014. The result in the test have 4 Obligations, and the engine is returning 6. I'm passing all the other samples, but I don't understand why I have to return 6 obligations in this test. There are 3 policies within a policy set. Each policy have 4 Obligations, 2 on Deny and 2 on Permit. Policy1 is NotApplicable which does not add any Obligation, Policy2 is Permit which adds 2 Obligations and Policy3 is Deny which adds 2 Obligations. Since the PolicySet is Deny it will add 2 Obligations which sums 6. The 6 Obligations that I'm returning are: policy2-obligation-1, policy2-obligation-2, policy3-obligation-3, policy3-obligation-4, policyset-obligation3 and policyset-obligation4. I'll like to know what is the technique that you used in your implementations in order to use the same, so all the implementation behave the same. Thanks in advance, Diego Gonzalez Lagash Systems SA
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]